Implement FDX v6 consent grant with fine-grained resource permissions and structured consent receipt retrieval

Steps

1. Register your data recipient in the FDX directory and obtain a software statement assertion (SSA) with the required FDX scopes
2. Initiate a PAR request to the FI's pushed authorization endpoint including resource indicators (resource parameter) scoped to specific account clusters rather than all accounts
3. Complete FAPI 2.0 authorization code flow with PKCE; on callback exchange code for access and refresh tokens and store the consentId returned in the token response or consent endpoint
4. Retrieve the structured consent receipt from the FI's consent endpoint using the consentId to record exactly what data was granted, which accounts, and the expiry
5. Implement a consent status poller that calls the consent endpoint before each data fetch to detect if the consumer has revoked or the FI has downgraded the consent scope
6. On revocation event, purge locally cached account and transaction data per FDX data deletion requirements and notify the end user